VLANs for a Small Homelab Without Unnecessary Complexity
How to introduce VLANs into a small homelab without turning a hobby network into an unmaintainable maze — plus the recovery steps for when segmentation locks you out.
TAG
How to introduce VLANs into a small homelab without turning a hobby network into an unmaintainable maze — plus the recovery steps for when segmentation locks you out.
Exposing SSH or dashboards directly to the internet is unnecessary risk for small deployments. WireGuard gives a cleaner and safer remote access model.
Many ESP32 projects run perfectly on a developer desk and collapse once deployed in apartments, offices, or industrial spaces with noisy Wi-Fi conditions. The main mistake is treating every disconnect as an exceptional event.
A detailed retrospective on using Apache2 as a reverse proxy in front of legacy internal applications with TLS, auth, and rollout control.
A long practical report on setting up Nginx edge caching and predictable zero-downtime deployments on a small VPS stack.
A deep retrospective on running Traefik for many self-hosted services with dynamic routing, middleware policy, and safer operations.
A practical retrospective on building a reliable WireGuard site-to-site VPN between home lab and VPS environments with routing, MTU, and operational hardening lessons.